hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Anoop Sam John (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-10860) Insufficient AccessController covering permission check
Date Fri, 28 Mar 2014 10:47:15 GMT
Anoop Sam John created HBASE-10860:
--------------------------------------

             Summary: Insufficient AccessController covering permission check
                 Key: HBASE-10860
                 URL: https://issues.apache.org/jira/browse/HBASE-10860
             Project: HBase
          Issue Type: Bug
          Components: security
    Affects Versions: 0.98.0
            Reporter: Anoop Sam John
            Assignee: Anoop Sam John
            Priority: Critical
             Fix For: 0.99.0, 0.98.2


{code}
  List<Cell> list = (List<Cell>)entry.getValue();
  if (list == null || list.isEmpty()) {
	get.addFamily(col);
  } else {
	for (Cell cell : list) {
	  get.addColumn(col, CellUtil.cloneQualifier(cell));
	}
  }
{code}
When a delete family Mutation comes, a Cell will be added into the list with Qualifier as
null. (See Delete#deleteFamily(byte[])). So it will miss getting added against the check list
== null || list.isEmpty().  We will fail getting the cells under this cf for covering permission
check.




--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message